[Bug 248254] /etc/rc.d/ipfw should support ipdivert_enable="YES"

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Jul 25 04:54:42 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248254

            Bug ID: 248254
           Summary: /etc/rc.d/ipfw should support ipdivert_enable="YES"
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs at FreeBSD.org
          Reporter: msl0000023508 at gmail.com

Created attachment 216753
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=216753&action=edit
ipfw-rc-script-ipdivert-config.diff

Currently this RC script will load ipdivert.ko only on natd_enable="YES"; this
patch however added another RC variable to load the kernel module along with
ipfw.ko, if enabled.

I uses some ipdivert-based programs that work with ipfw(4), however I don't use
natd(8), so I need another way to automatically load ipdivert.ko without adding
ipdivert_load=YES in /boot/loader.conf, because I don't want ipfw be enabled so
early at boot.

For example to enable ipdivert without natd, add following to /etc/rc.conf:

firewall_enable="YES"
ipdivert_enable="YES"

Of course other ipfw-related variables may be required to complete the whole
configuration.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list